HackadayU: Reverse Engineering with Ghidra Class 1

  Переглядів 212,468

HACKADAY

HACKADAY

День тому

This is Class 1 in Reverse Engineering with Ghidra taught by Matthew Alt.
Learn with us: www.hackaday.io/u
Playlist for the Reverse Engineering with Ghidra series:
• HackadayU: Reverse Eng...
0:00 - Presentation Outline
2:54 - What is Software Reverse Engineering?
4:12 - Software Engineering Review
24:54 - x86_64 Architecture Review
45:10 - Ghidra Overview and Basic Usage

КОМЕНТАРІ: 80
@hackaday
@hackaday 3 роки тому
Hi everyone! I hope that you enjoy the content we put together for these videos. If you have questions, feel free to reach out to the Instructor on twitter twitter.com/wrongbaud. All of the course details can be found here: hackaday.io/project/172292-introduction-to-reverse-engineering-with-ghidra
@Best-um3eq
@Best-um3eq 2 роки тому
Motherf get a good Mike.
@FrostByte990
@FrostByte990 Місяць тому
It's upsetting how clear and concise this lesson is compared to my past training. Amazing series so far!
@billjon2732
@billjon2732 3 роки тому
A lot of stuff I didn’t know so thanks for the review of everything before diving in 👌
@redpillcommando
@redpillcommando 3 роки тому
I love this and I want to see more on this subject. Thank you.
@paullee107
@paullee107 2 роки тому
Awesome awesome awesome - this is exactly what I was looking for, in hackaday form. Thanks so kindly!
@StreetHockey666
@StreetHockey666 2 роки тому
Absolutely wonderful content. Thank you so much!
@OxTongue0
@OxTongue0 Рік тому
Very well made content and I thoroughly enjoyed the talk and learned something new
@Ninja5433
@Ninja5433 3 роки тому
Addicted to learning
@jeffmoye
@jeffmoye 3 роки тому
35:34 push and pop. If the stack grows down (towards lower and lower memory locations as in your animation, which is correct for the x86 architectures), then PUSHing will DECREASE the stack pointer. POPing will INCREASE the pointer.
@matthewa3454
@matthewa3454 3 роки тому
Good catch! Thank you for pointing that out
@Swangorapofficial
@Swangorapofficial 8 місяців тому
This video cured my depression and cancer. Thanks 🙏
@cjk568
@cjk568 2 роки тому
very well taught! thank you.
@Tyler-jd3ex
@Tyler-jd3ex Рік тому
When I saw there was all the episodes, I was so happy. I love that there’s so many people interested in this stuff to where there’s PLENTY enough for any person who wants to learn, yet it’s not like even coding is an extremely popular hobby/interest/career among all people
@ant-mf6kl
@ant-mf6kl Рік тому
Honestly it seems like finding materials on rev engineering specifically is a lot harder than most other tech topics. Might just have to cave and read that one 1000 page book to hopefully gain a decent understanding
@Tyler-jd3ex
@Tyler-jd3ex Рік тому
@@ant-mf6kl Yeah seriously! Especially when it comes to specific examples, it is absolutely (nearly) impossible to find a good resource
@ant-mf6kl
@ant-mf6kl Рік тому
@@Tyler-jd3ex true which is really odd considering it's a vast and fun field. You pretty much have to research it all by yourself with blood and sweat if you have a specific aim in mind. I guess the fact that it's quite easy to get into illegal territories plays a part in how hard finding good material is which is a shame...
@Tyler-jd3ex
@Tyler-jd3ex Рік тому
@@ant-mf6kl It’s such a niche area. Out of 100 people you won’t find coders really. Out of 100 people it’s likely none of them know assembly… and then even of people who do know it, only so many of them make videos or help others. It’s so difficult! I often just wish I knew somebody who could show me stuff that can be taught quickly but is so hard to figure out yourself. Well if you ever need help I suppose you can try to ask me! 😂
@Aeviu
@Aeviu 2 роки тому
Thanks for the free content!
@abandonedmuse
@abandonedmuse 3 роки тому
Amazing class. I think I have seen assembly code taught a million times but I FINALLY UNDERSTAND IT PERFECTLY! Wow. Quick question and this may be out of the scope pf your class but I was working on my own files and I have a ton of instructions on my machine considered RAW and it says unknown and the instructions give errors with ?? Question marks. Any idea what this means? Thanks again!
@ryusaki6902
@ryusaki6902 3 роки тому
Thanks for the content, i'm learning a lot! Any chance we get into PE reversing at some point of this course?
@nooraalhosani7516
@nooraalhosani7516 2 роки тому
thanks, that was really helpful
@superuser8636
@superuser8636 3 роки тому
Great video
@user-lb8jd3tc5q
@user-lb8jd3tc5q 8 місяців тому
awesomeeee
@mikebest6670
@mikebest6670 4 місяці тому
very interesting thanks for. the lesson good. advice
@julias-shed
@julias-shed 3 дні тому
Very clear excellent 😀
@kfp87
@kfp87 3 роки тому
Great content! New sub, all bells here Cheer
@noureldinehab2686
@noureldinehab2686 3 роки тому
thanks for your effort and time you are awesome (ps: audio quality can be improved even if you are not gonna buy a new microphone)❤❤❤
@infohacking
@infohacking 3 роки тому
Love your video!😊 i have a question.. currently i am learning some bufferoverflow concepts and using radare2 ...i hear lot about ghidra too should i switch?
@redpillcommando
@redpillcommando 3 роки тому
I'm just getting started myself, but I would hands down tell you to load ghidra. You will be glad you did.
@rpavlik1
@rpavlik1 3 роки тому
Ghidra is much more intuitive, at least if you aren't already fast at re2. Worth trying, at least, since they're both open source.
@evannibbe9375
@evannibbe9375 3 роки тому
Ghidra was developed by the NSA to overcome the limitations present in every other program available for reverse engineering, and limit the number of tools you need to have open at once to do it to 1.
@DrWho2008t101
@DrWho2008t101 2 роки тому
thanks
@allancoe123456
@allancoe123456 3 роки тому
Great content, greats .) maybe do more in dep on links for they are very important :)
@noureldinehab2686
@noureldinehab2686 3 роки тому
❤❤❤❤
@mallninja9805
@mallninja9805 Рік тому
Starting from the slide @37:20 to about @40:00 were you using RIP & EIP interchangeably? When you say "mov" - is the value actually _moved_ as in the source register is cleared? Or is the value copied? For example after the instruction mov rax, rbx - what is in rbx? Similar question for popping values off the stack - Does that just increments the stack pointer, and whatever values were in that memory will continue to be in that memory until the stack pointer is decremented again & new values get written?
@nikos4677
@nikos4677 10 місяців тому
mov copies the value. So pop register does 2 things. In x86 It looks like mov register, [esp] and then add esp, 4. So mov copies the value. So it remains the same
@JustSomeAussie1
@JustSomeAussie1 3 роки тому
why is the face cam so large? It's hard to see the content on the screen :(
@user-xw4od8kb7y
@user-xw4od8kb7y 3 роки тому
I didnt even notice him before u said it ZLOOL
@moon911x
@moon911x Рік тому
😂😁
@SkegAudio
@SkegAudio Рік тому
Bruh, I have seen this video so many times and I never noticed bro had a face cam
@_Cfocus
@_Cfocus 8 місяців тому
😂😂😂😂
@rpchost
@rpchost Рік тому
Hello; I am not able to find the main function in Symbol tree, what I should do in such case.
@ijazahmer
@ijazahmer 2 роки тому
Can this trick will work with wilcome e4. 5 embroidery software for cracking
@BeautyofourLife
@BeautyofourLife 3 роки тому
awsm content dear keep it up LOVE FROM BHAARAT (INDIA)
@egemor
@egemor 7 місяців тому
You should make your face-cam smaller, covering the content of the video 😡
@captainkarma7374
@captainkarma7374 6 місяців тому
Is this sarcasm?
@Cooliofamily
@Cooliofamily 5 місяців тому
It’s honestly really distracting from the content :/
@_XoR_
@_XoR_ 5 місяців тому
Ikr, I can't see anything..
@EliteBuildingCompany
@EliteBuildingCompany 4 місяці тому
@@captainkarma7374 Are you American?
@captainkarma7374
@captainkarma7374 4 місяці тому
​@@EliteBuildingCompany no but my english isnt the best
@Al-Musalmiin
@Al-Musalmiin Рік тому
is it required to know C/C++ before i use Ghidra? or can i learn SRE without any coding knowledge? what are your recommendations?
@anntakamaki1960
@anntakamaki1960 7 місяців тому
Yes, it’s required to learn C programming for Ghidra. Learning assembly and CPU architecture is required too, if you want to use debugger.
@janlab2433
@janlab2433 Рік тому
I am having an import error while adding a elf file with language xtensa pls help to override it
@BobbyBattista
@BobbyBattista Рік тому
I'm getting error "zsh: exec format error: ./c1" and a quick google led me to some posts suggesting that it's an issue with Apple M1 processors. Is there a workaround? Or an alternate set of exercise files to download?
@pierre-huguesaubertin1654
@pierre-huguesaubertin1654 Рік тому
M1 are ARM processor... i suggest you to have vm to emulate x64 instructions set.
@billschauer2240
@billschauer2240 3 роки тому
I have a 27" 1080p monitor but the examples are of such a small and thin font that I often can not read them even in full screen mode. Not being able to read the examples reduces the value of the video.
@udgrafdes
@udgrafdes 3 роки тому
Really stupid request, but can you post the video for the office hours on youtube? I'm having a lot of trouble with twitch for whatever reason.
@hackaday
@hackaday 3 роки тому
Hello! We don't have a video for office hours, it is live only.
@udgrafdes
@udgrafdes 3 роки тому
@@hackaday :(
@rajsanmihir
@rajsanmihir Рік тому
Hi I am unable to open the website, please update the website, Thanks
@Hexalyse
@Hexalyse 3 роки тому
The teaching is awesome, but you should consider getting a better microphone (like a large condenser microphone, and not one from a headset... they're never good) and/or not compressing audio that much because it's lacking some frequencies and have lots of hissing, so I have to listen to it pretty loud to be able to understand, which makes it a bit unpleasant to the ears.
@Veisemer
@Veisemer 5 місяців тому
Late to the party but Im pretty sure my brains got filled.
@oahts5906
@oahts5906 Рік тому
I might be mistaken…but isn’t C more of a ‘low level’ language, and a high level language would be something more like python or even js ?
@rkakkar007
@rkakkar007 Рік тому
from an application development perspective - yes from a systems-level perspective - probably no
@mallninja9805
@mallninja9805 Рік тому
For most of its life C has been considered a high-level language because it abstracts away the hardware details. The language is machine-independent, you don't have to directly manipulate registers or manage the stack, etc. In recent years people have taken to thinking of C as "low-level" because you *do* have to do more hands-on memory management than with something like Java, and you *can* still get into the guts of the machine if you so choose. But I think "official" definitions (if there are such things) still classify C as a high level language.
@AhmedKhaled-zf7cj
@AhmedKhaled-zf7cj 3 роки тому
can you tell me the entire roadmap for learning RE?
@TalsonHacks
@TalsonHacks 2 роки тому
Learn the following: 1- Executable files format (PE & ELF) 2- C/C++ Programming 3- Assembly Programming 4- Debugging tools like GDB and WinDBG 5-Debuggers and decompilers like IDA and Ghidra 6- Do reversing CTFs and challenges, crackmes, etc. Good luck
@warmflatsprite
@warmflatsprite Рік тому
Fun Zelda series fact - Nintendo took kind of an easy out when deciding how to canonize all of the entries in The Legend of Zelda series. They named Link the Hero of Time, and consider the link in each game to be a reincarnation of said Hero of Time. So the most you can say is that he's Hyrulian, as his race changes throughout the series.
@idanbanani7703
@idanbanani7703 3 роки тому
Annoying "sound effects" :) , superb content. Thank you!
@dlink367
@dlink367 4 місяці тому
Hey am new here
@geocine
@geocine 2 роки тому
Action starts at 56:29
@AmineOnline
@AmineOnline 3 роки тому
I passed the whole month to understand this video can you give me a cookie for my hard work :D.
@whatami2437
@whatami2437 3 роки тому
grab some from your browser!
@dylanmatthews7431
@dylanmatthews7431 2 роки тому
I have a question for you when it comes to wanting to crack a game. Do you personally know if there is anyone talented enough in the scene to reverse engineer the game Path of Exile? People say it's one of the worst targets they've ever attempted, with a bunch of abstraction layers and you get perma banned if you even look too long. It's a live server client and the game is free, but people want to make their own private server out of it to be able to play the content the way they want, in a non-profit fashion obviously. Any ideas on how you would go about bypassing the drm on this live service client and getting the source code for people to make their own private server out of it?
@ECEPrashant
@ECEPrashant 2 роки тому
34:40
@luvpodcast9763
@luvpodcast9763 2 роки тому
I want to learn hacking and reverse engineering .my skills computer tech engineer and with skills html, CSS js only. . please guide me ..I'm from India
HackadayU: Reverse Engineering with Ghidra Class 2
59:33
HACKADAY
Переглядів 50 тис.
Best OS for programming? Mac vs Windows vs Linux debate settled
8:41
0% Respect Moments 😥
00:27
LE FOOT EN VIDÉO
Переглядів 41 млн
Surprise Gifts #couplegoals
00:21
Jay & Sharon
Переглядів 28 млн
Eurovision Song Contest 2024: First Semi-Final (Live Stream) | Malmö 2024 🇸🇪
2:23:45
everything is open source if you can reverse engineer (try it RIGHT NOW!)
13:56
Low Level Learning
Переглядів 1,2 млн
Ghidra - Journey from Classified NSA Tool to Open Source
47:36
Black Hat
Переглядів 73 тис.
Learn Reverse Engineering (for hacking games)
7:26
cazz
Переглядів 937 тис.
A Competition for Unreadable Code?
12:33
LaurieWired
Переглядів 103 тис.
Intro to Hardware Reversing: Finding a UART and getting a shell
12:07
Tony Gambacorta
Переглядів 871 тис.
Self-Learning Reverse Engineering in 2022
9:09
LiveOverflow
Переглядів 351 тис.
you can become a GIGACHAD assembly programmer in 10 minutes (try it RIGHT NOW)
9:48
Нужно ли чистить ПК от пыли?
0:59
CompShop Shorts
Переглядів 156 тис.